Ubuntu 16.04

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6731-1 Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 Upstream summary: It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8223-1 Related CVEs: CVE-2024-38357 CVE-2024-38356 CVE-2024-42008 CVE-2024-42010 CVE-2026-26079 CVE-2026-25916 CVE-2019-15237 CVE-2017-8114  +12 more Upstream summary: It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6437-1 Related CVEs: CVE-2018-7998 CVE-2019-6976 CVE-2020-20739 CVE-2021-27847 CVE-2023-40032 Upstream summary: Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8103-1 Related CVEs: CVE-2026-27596 CVE-2026-25884 CVE-2020-18899 CVE-2025-55304 CVE-2025-54080 CVE-2026-27631 CVE-2020-18771 CVE-2021-32815  +12 more Upstream summary: It was discovered that Exiv2 did not correctly handle reading certain buffers. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8062-2 Related CVEs: CVE-2025-15224 CVE-2025-15079 CVE-2025-14017 CVE-2024-7264 CVE-2024-2398 CVE-2023-46218 CVE-2023-38546 CVE-2023-28321  +12 more Upstream summary: USN-8062-1 fixed vulnerabilities in curl. This update provides the corresponding update for CVE-2025-14017, CVE-2025-15079, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8035-1 Related CVEs: CVE-2026-25646 CVE-2026-22801 CVE-2025-66293 CVE-2026-22695 CVE-2025-64720 CVE-2025-64506 CVE-2025-64505 CVE-2025-65018  +2 more Upstream summary: It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8005-1 Related CVEs: CVE-2026-0915 CVE-2025-8058 CVE-2025-15281 CVE-2026-0861 CVE-2025-0395 CVE-2024-33599 CVE-2024-33600 CVE-2024-33601  +12 more Upstream summary: Vitaly Simonovich discovered that the GNU C Library did not properly initialize the input when […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7643-1 Related CVEs: CVE-2025-4969 CVE-2025-32914 CVE-2025-4945 CVE-2025-32907 CVE-2025-4948 CVE-2025-32053 CVE-2024-52531 CVE-2025-32052  +12 more Upstream summary: Jan Różański discovered that libsoup incorrectly handled range headers in an HTTP request. An attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7231-1 Related CVEs: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 CVE-2023-4256  +12 more Upstream summary: It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote […]